pfSense

	part of m0n0wall (http://m0n0.ch/wall)

	Copyright (C) 2003-2005 Manuel Kasper <mk@neon1.net>.

	All rights reserved.

	Redistribution and use in source and binary forms, with or without

	1. Redistributions of source code must retain the above copyright notice,

	2. Redistributions in binary form must reproduce the above copyright

	THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,

if (isset($id) && $a_ipsec[$id]) {

	$pconfig['auto'] = isset($a_ipsec[$id]['auto']);

	if (!isset($a_ipsec[$id]['local-subnet']))

		address_to_pconfig_vpn($a_ipsec[$id]['local-subnet'], $pconfig['localnet'], $pconfig['localnetmask']);

	if ($a_ipsec[$id]['interface'])

	list($pconfig['remotenet'],$pconfig['remotebits']) = explode("/", $a_ipsec[$id]['remote-subnet']);

	if (isset($a_ipsec[$id]['p1']['myident']['myaddress']))

 	} else if (isset($a_ipsec[$id]['p1']['myident']['dyn_dns'])) {

	$pconfig['p1ealgo'] = $a_ipsec[$id]['p1']['encryption-algorithm'];

	$pconfig['p1authentication_method'] = $a_ipsec[$id]['p1']['authentication_method'];

	$pconfig['p1pskey'] = $a_ipsec[$id]['p1']['pre-shared-key'];

	$pconfig['p1cert'] = base64_decode($a_ipsec[$id]['p1']['cert']);

	$pconfig['p2proto'] = $a_ipsec[$id]['p2']['protocol'];

	$pconfig['pinghost'] = $a_ipsec[$id]['pinghost'];

} else {

	$pconfig['p1authentication_method'] = "pre_shared_key";

	$pconfig['p1ealgo'] = "3des";

	$pconfig['p2ealgos'] = explode(",", "3des,blowfish,cast128,rijndael,rijndael 256");

	$pconfig['p2halgos'] = explode(",", "hmac_sha1,hmac_md5");

	$pconfig['remotebits'] = 32;

}

	unset($input_errors);

	if ($_POST['p1authentication_method'] == "pre_shared_key") {

		$reqdfieldsn = explode(",", "Local network,Remote network,Remote network bits,Remote gateway,P2 Encryption Algorithms,P2 Hash Algorithms");

		if (!strstr($_POST['p1cert'], "BEGIN CERTIFICATE") || !strstr($_POST['p1cert'], "END CERTIFICATE"))

			$input_errors[] = "This key does not appear to be valid.";

		if ($_POST['p1peercert']!="" && (!strstr($_POST['p1peercert'], "BEGIN CERTIFICATE") || !strstr($_POST['p1peercert'], "END CERTIFICATE")))

			$input_errors[] = "This peer certificate does not appear to be valid.";

	}

	do_input_validation($_POST, $reqdfields, $reqdfieldsn, &$input_errors);

	if (!is_specialnet($_POST['localnettype'])) {

	if ($_POST['remotebits'] && (!is_numeric($_POST['remotebits']) || ($_POST['remotebits'] < 0) || ($_POST['remotebits'] > 32))) {

		if(!$_POST['remotebits'] == "0.0.0.0")

			$input_errors[] = "The remote network bits are invalid.";

	}

	if (($_POST['remotenet'] && !is_ipaddr($_POST['remotenet'])) or $_POST['remotenet'] == "0.0.0.0") {

		/* allow 0.0.0.0 remote net usage */

		if($_POST['remotenet'] <> "0.0.0.0")

		$input_errors[] = "A valid remote network address must be specified.";

		if(is_domain($_POST['remotegw']) == false)

			$input_errors[] = "A valid remote gateway address must be specified.";

	}

		if (is_domain($ufqdn[1]) == false)

			$input_errors[] = "A valid User FQDN in the form of user@my.domain.com for 'My identifier' must be specified.";

	}

	if ($_POST['p1myidentt'] == "dyn_dns") {

		if (is_domain($_POST['p1myidentt']) == false)

			$input_errors[] = "A valid Dynamic DNS address for 'My identifier' must be specified.";

	}

	if ($_POST['p1myidentt'] == "myaddress")

		//$ipsecent['auto'] = $_POST['auto'] ? true : false;

		$ipsecent['interface'] = $pconfig['interface'];

		$ipsecent['p1']['myident'] = array();

			case 'dyn_dns':

		}

		$ipsecent['p1']['encryption-algorithm'] = $_POST['p1ealgo'];

		$ipsecent['p1']['private-key'] = base64_encode($_POST['p1privatekey']);

		$ipsecent['p2']['protocol'] = $_POST['p2proto'];

		$ipsecent['pinghost'] = $_POST['pinghost'];

		if (isset($id) && $a_ipsec[$id])

		write_config();

		header("Location: vpn_ipsec.php");

$pgtitle = "VPN: IPsec: Edit tunnel";

include("head.inc");

?>

<?php include("fbegin.inc"); ?>

<p class="pgtitle"><?=$pgtitle?></p>

<script language="JavaScript">

function methodsel_change() {

//-->

                <tr>

                  <td width="22%" valign="top" class="vncellreq">Mode</td>

				<tr>

                  <td width="22%" valign="top" class="vncellreq">Disabled</td>

                  <td width="78%" class="vtable">

                    <input name="disabled" type="checkbox" id="disabled" value="yes" <?php if ($pconfig['disabled']) echo "checked"; ?>>

		<tr>

                  <td width="22%" valign="top" class="vncellreq">Interface</td>

                  <td width="78%" class="vtable"><select name="interface" class="formfld">

                      <?php $interfaces = array('wan' => 'WAN', 'lan' => 'LAN');

                      <option value="<?=$iface;?>" <?php if ($iface == $pconfig['interface']) echo "selected"; ?>>

                      <?=htmlspecialchars($ifacename);?>

                <tr>

                  <td width="22%" valign="top" class="vncellreq">Local subnet</td>

                  <td width="78%" class="vtable">

                    <table border="0" cellspacing="0" cellpadding="0">

                      <tr>

                        <td>Type:&nbsp;&nbsp;</td>

						<td></td>

                        <td><select name="localnettype" class="formfld" onChange="typesel_change()">

                            <option value="single" <?php if (($pconfig['localnetmask'] == 32) && !$sel) { echo "selected"; $sel = 1; } ?>>

                            Single host</option>

                            <option value="network" <?php if (!$sel) echo "selected"; ?>>

                            Network</option>

                            <option value="lan" <?php if ($pconfig['localnet'] == "lan") { echo "selected"; } ?>>

                            LAN subnet</option>

                      <tr>

                        <td>Address:&nbsp;&nbsp;</td>

						<td><?=$mandfldhtmlspc;?></td>

                        <td><input name="localnet" type="text" class="formfld" id="localnet" size="20" value="<?php if (!is_specialnet($pconfig['localnet'])) echo htmlspecialchars($pconfig['localnet']);?>">

                          /

                          <select name="localnetmask" class="formfld" id="localnetmask">

                            <?php for ($i = 31; $i >= 0; $i--): ?>

                            <option value="<?=$i;?>" <?php if ($i == $pconfig['localnetmask']) echo "selected"; ?>>

                <tr>

                  <td width="22%" valign="top" class="vncellreq">Remote subnet</td>

                  <td width="78%" class="vtable">

                    <?=$mandfldhtml;?><input name="remotenet" type="text" class="formfld" id="remotenet" size="20" value="<?=$pconfig['remotenet'];?>">

                    /

                    <select name="remotebits" class="formfld" id="remotebits">

                      <?php for ($i = 32; $i >= 0; $i--): ?>

                      <option value="<?=$i;?>" <?php if ($i == $pconfig['remotebits']) echo "selected"; ?>>

                      <?=$i;?>

                <tr>

                  <td width="22%" valign="top" class="vncellreq">Remote gateway</td>

                  <td width="78%" class="vtable">

                    <br>

                <tr>

                  <td width="22%" valign="top" class="vncell">Description</td>

                  <td width="78%" class="vtable">

                    for your reference (not parsed).</span></td>

                <tr>

                  <td colspan="2" class="list" height="12"></td>

                <tr>

                    (Authentication)</td>

                <tr>

                  <td width="22%" valign="top" class="vncellreq">Negotiation mode</td>

					<select name="p1mode" class="formfld">

                      <?php $modes = explode(" ", "main aggressive"); foreach ($modes as $mode): ?>

                      <option value="<?=$mode;?>" <?php if ($mode == $pconfig['p1mode']) echo "selected"; ?>>

                      <?=htmlspecialchars($mode);?>

                    </select> <br> <span class="vexpl">Aggressive is faster, but

                    less secure.</span></td>

                <tr>

                  <td width="22%" valign="top" class="vncellreq">My identifier</td>

					<select name="p1myidentt" class="formfld">

                      <?php foreach ($my_identifier_list as $mode => $modename): ?>

                      <option value="<?=$mode;?>" <?php if ($mode == $pconfig['p1myidentt']) echo "selected"; ?>>

                      <?=htmlspecialchars($modename);?>

                    </select> <input name="p1myident" type="text" class="formfld" id="p1myident" size="30" value="<?=$pconfig['p1myident'];?>">

                  </td>

                <tr>

                  <td width="22%" valign="top" class="vncellreq">Encryption algorithm</td>

					<select name="p1ealgo" class="formfld">

                      <?php foreach ($p1_ealgos as $algo => $algoname): ?>

                      <option value="<?=$algo;?>" <?php if ($algo == $pconfig['p1ealgo']) echo "selected"; ?>>

                      <?=htmlspecialchars($algoname);?>

                    </select> <br> <span class="vexpl">Must match the setting

                    chosen on the remote side. </span></td>

                <tr>

                  <td width="22%" valign="top" class="vncellreq">Hash algorithm</td>

					<select name="p1halgo" class="formfld">

                      <?php foreach ($p1_halgos as $algo => $algoname): ?>

                      <option value="<?=$algo;?>" <?php if ($algo == $pconfig['p1halgo']) echo "selected"; ?>>

                      <?=htmlspecialchars($algoname);?>

                    </select> <br> <span class="vexpl">Must match the setting

                    chosen on the remote side. </span></td>

                <tr>

                  <td width="22%" valign="top" class="vncellreq">DH key group</td>

					<select name="p1dhgroup" class="formfld">

                      <?php $keygroups = explode(" ", "1 2 5"); foreach ($keygroups as $keygroup): ?>

                      <option value="<?=$keygroup;?>" <?php if ($keygroup == $pconfig['p1dhgroup']) echo "selected"; ?>>

                      <?=htmlspecialchars($keygroup);?>

                    </select> <br> <span class="vexpl"><em>1 = 768 bit, 2 = 1024

                    bit, 5 = 1536 bit</em><br>

                <tr>

                  <td width="22%" valign="top" class="vncell">Lifetime</td>

                  <td width="78%" class="vtable">

                    <input name="p1lifetime" type="text" class="formfld" id="p1lifetime" size="20" value="<?=$pconfig['p1lifetime'];?>">

                <tr>

                  <td width="22%" valign="top" class="vncellreq">Authentication method</td>

                  <td width="78%" class="vtable">

					<select name="p1authentication_method" class="formfld" onChange="methodsel_change()">

                      <option value="<?=$method;?>" <?php if ($method == $pconfig['p1authentication_method']) echo "selected"; ?>>

                      <?=htmlspecialchars($methodname);?>

                    </select> <br> <span class="vexpl">Must match the setting

                    chosen on the remote side.</span></td>

                <tr>

                  <td width="22%" valign="top" class="vncellreq">Pre-Shared Key</td>

                  <td width="78%" class="vtable">

                  </td>

                <tr>

                  <td width="22%" valign="top" class="vncellreq">Certificate</td>

                  <td width="78%" class="vtable">

                    <textarea name="p1cert" cols="65" rows="7" id="p1cert" class="formpre"><?=htmlspecialchars($pconfig['p1cert']);?></textarea>

                    <br>

                    Paste a certificate in X.509 PEM format here.</td>

                <tr>

                  <td width="22%" valign="top" class="vncellreq">Key</td>

                  <td width="78%" class="vtable">

                    <textarea name="p1privatekey" cols="65" rows="7" id="p1privatekey" class="formpre"><?=htmlspecialchars($pconfig['p1privatekey']);?></textarea>

                    <br>

                    Paste an RSA private key in PEM format here.</td>

                <tr>

                  <td width="22%" valign="top" class="vncell">Peer certificate</td>

                  <td width="78%" class="vtable">

                    <textarea name="p1peercert" cols="65" rows="7" id="p1peercert" class="formpre"><?=htmlspecialchars($pconfig['p1peercert']);?></textarea>

                    <br>

                    Paste the peer X.509 certificate in PEM format here.<br>

                <tr>

                  <td colspan="2" class="list" height="12"></td>

                <tr>

                    (SA/Key Exchange)</td>

                <tr>

                  <td width="22%" valign="top" class="vncellreq">Protocol</td>

					<select name="p2proto" class="formfld">

                      <?php foreach ($p2_protos as $proto => $protoname): ?>

                      <option value="<?=$proto;?>" <?php if ($proto == $pconfig['p2proto']) echo "selected"; ?>>

                      <?=htmlspecialchars($protoname);?>

                    </select> <br> <span class="vexpl">ESP is encryption, AH is

                    authentication only </span></td>

                <tr>

                  <td width="22%" valign="top" class="vncellreq">Encryption algorithms</td>

                  <td width="78%" class="vtable">

                    <?php foreach ($p2_ealgos as $algo => $algoname): ?>

                    <input type="checkbox" name="p2ealgos[]" value="<?=$algo;?>" <?php if (in_array($algo, $pconfig['p2ealgos'])) echo "checked"; ?>>

                    <?=htmlspecialchars($algoname);?>

                    <br>

                    <?php endforeach; ?>

                    Hint: use 3DES for best compatibility or if you have a hardware

                    software encryption. </td>

                <tr>

                  <td width="22%" valign="top" class="vncellreq">Hash algorithms</td>

                  <td width="78%" class="vtable">

                    <?php foreach ($p2_halgos as $algo => $algoname): ?>

                    <input type="checkbox" name="p2halgos[]" value="<?=$algo;?>" <?php if (in_array($algo, $pconfig['p2halgos'])) echo "checked"; ?>>

                    <?=htmlspecialchars($algoname);?>

                    <br>

                    <?php endforeach; ?>

                <tr>

                  <td width="22%" valign="top" class="vncellreq">PFS key group</td>

					<select name="p2pfsgroup" class="formfld">

                      <?php foreach ($p2_pfskeygroups as $keygroup => $keygroupname): ?>

                      <option value="<?=$keygroup;?>" <?php if ($keygroup == $pconfig['p2pfsgroup']) echo "selected"; ?>>

                      <?=htmlspecialchars($keygroupname);?>